Breach Archives - Mediarabe

University of Missouri Health Care Suffers Breach Impacting More Than 180K

October 13, 2020

MU Health Care’s investigation determined that the unauthorized access to the accounts occurred between May 4 and May 6.

A version of this article was first published October 13, 2020, by HCPro’s Revenue Cycle Advisor, a sibling publication to HealthLeaders.

University of Missouri Health Care (MU Health Care), a health system located in Columbia, Missouri, on September 17 reported a security incident that potentially affected 189,736 individuals, according to the Office for Civil Rights (OCR) breach report.

In a security notice posted to its website, MU Health Care disclosed that unauthorized individuals may have gained access to the email accounts of certain MU Health Care employees.

MU Health Care’s investigation determined that the unauthorized access to the accounts occurred between May 4 and May 6. The accounts were accessed through a phishing scam.

Patient information potentially affected by the security incident included the following:

Dates of birth
Health insurance

AG Announces Community Health Systems Data Breach Settlement

October 12, 2020

| No Comments

| Community Health

Press release from the office of the Attorney General of Connecticut:

Oct. 11, 2020

Attorney General William Tong today joined 27 other state attorneys general announcing a settlement with Tennessee-based CHS/Community Health Systems, Inc., and its subsidiary, CHSPSC LLC. This settlement resolves an investigation of a data breach which impacted approximately 6.1 million patients.

At the time of the data breach, CHS owned, leased, or operated 206 affiliated hospitals. Although none of the hospitals were located in Connecticut, 4,746 Connecticut residents were impacted by the breach. Exposed in the breach were the names, birthdates, social security numbers, phone numbers, and addresses of patients. The settlement, agreed to by CHS, requires a $5 million payment to the states and provides that CHS agrees to implement and maintain a comprehensive information security program reasonably designed to safeguard Personal Information (PI) and Protected Health Information (PHI), which will include specific information security requirements.

Tennessee Health Data Management Firm Agrees to $2m Data Breach Settlement

October 9, 2020

| No Comments

| Health Magazine

A Tennessee firm that provides health data management services has agreed to pay the United States Office for Civil Rights (OCR) $2.3m to settle charges related to a data breach.

Charges were brought against Tennessee-based Community Health Systems (CHSPSC LLC) by 28 states after the personal health information (PHI) of millions of people ended up in the hands of cyber-criminals.

In April 2014, CHSPSC was notified by the Federal Bureau of Investigation that Chinese advanced persistent threat group APT18 had gained access to the company’s information system and was exfiltrating PHI. The hackers continued to access and exfiltrate the PHI until August 2014, despite the notice’s being sent.

CHSPSC provides a variety of business associate services, including IT and health information management, to hospitals and clinics indirectly owned by Community Health Systems, Inc., in Franklin, Tennessee. Community Health Systems owned, leased, or operated 206 affiliated hospitals at the time of

Accresa Wins Breach of Contract Verdict Against Hint Health

October 6, 2020

| No Comments

| Health Benefits

Accresa has secured a verdict in federal court against Hint Health, affirming its breach of contract claim

DALLAS–(BUSINESS WIRE)–October 6, 2020–

Accresa, a technology provider focused on healthcare payments solutions for employers and provider networks, has won a verdict in federal court against San Francisco-based software company Hint Health.

The verdict was announced on September 30, 2020, following a two-week jury trial before Judge Amos L. Mazzant, III in the U.S. District Court for the Eastern District of Texas in Sherman (4:18-cv-00536-ALM-CMC). Jurors found in favor of Accresa for its breach of contract claim, and rejected the entirety of Hint Health’s counterclaims against Accresa.

“As we maintained throughout the trial, Accresa worked in good faith to uphold its obligations under the partnership agreement with Hint Health, whereas Hint did not,” said Accresa CEO William Short. “We are proud of the work our team has done in partnership with national health

HIPAA Business Associate Pays $2.3 Million To Settle Breach Affecting Protected Health Information Of Over 6 Million Individuals – Food, Drugs, Healthcare, Life Sciences

September 27, 2020

| No Comments

| Health Facts

United States:

HIPAA Business Associate Pays $2.3 Million To Settle Breach Affecting Protected Health Information Of Over 6 Million Individuals

25 September 2020

Foley Hoag LLP

To print this article, all you need is to be registered or login on Mondaq.com.

With apologies to John Donne, ask not for whom the bells tolls, HIPAA business
associates, it tolls for thee! While it has been the law for
some time that business associates could be held directly liable
for breaches, enforcement actions against them have been few and
far between. But a sizable settlement announced today by the
Office for Civil Rights at the U.S. Department of Health and Human
Services (HHS OCR) reminds us that business associates are going to
be held to the same standards (and subjected to the same penalties)
as HIPAA covered entities.

This $2.3 million settlement involved CHSPSC LLC,

Mediarabe

MU Health Care’s investigation determined that the unauthorized access to the accounts occurred between May 4 and May 6.

United States: HIPAA Business Associate Pays $2.3 Million To Settle Breach Affecting Protected Health Information Of Over 6 Million Individuals

United States:

HIPAA Business Associate Pays $2.3 Million To Settle Breach Affecting Protected Health Information Of Over 6 Million Individuals